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Top Stories 

• Toyota Motor Corporation agreed to pay a record $1.2 billion in fines and admit to 
misleading consumers as part of a settlement with the U.S. government regarding the 
company’s handling of two unintended acceleration issues. - Los Angeles Times (See item 

3 ) 

• A KOMO-TV 4 Seattle, Washington, news helicopter plummeted into an intersection near 
the Seattle Center campus March 18, setting three cars on fire and killing two people on 
board. - Associated Press (See item 8) 

• The Internal Revenue Service (IRS) reported March 18 that an employee took home a 
computer thumb drive containing personal information of about 20,000 IRS workers, 
former workers, and contractors. - Associated Press (See item 21 ) 

• A March 18 fire at the Vivint complex in Lindon, Utah, prompted the evacuation of 400- 
500 employees and left 3 people injured. - Salt Lake Tribune (See item 34 ) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

1. March 19, Nashua Telegraph - (New Hampshire) Merrimack chemical firm fined by 
EPA. The U.S. Environmental Protection Agency (EPA) fined JCI Jones Chemicals 
Inc., of Merrimack almost $41,000 to resolve allegations that the company failed to 
adequately evaluate risks associated with sorting and handling chlorine and sulfur 
dioxide in proximity to incompatible chemicals. The EPA also alleged that the 
company waited 10 hours to report to authorities a June 2010 chemical leak from a 
ruptured storage tank. 

Source: http://www.nashuatelegraph.com/news/1031704-469/merrimack-chemical- 
firm-fined-by-epa.html 

2. March 19, WSHM 3 Springfield - (Massachusetts) West Springfield emergency crews 
responding to hazmat situation. HAZMAT crews responded to a chemical spill inside 
a semi-truck that formed a vapor cloud at a warehouse for the Crystal Companies in 
West Springfield, Massachusetts, March 18. Crews spent several hours 
decontaminating people who may have been exposed to the chemical. 

Source: http://www.cbs3springfield.com/storv/25012301/west-springfield-emergency- 
crews-responding-to-hazmat-situation 

[ Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. March 19, Los Angeles Times - (National) Toyota admits misleading regulators, 
pays $1.2-billion federal fine. Toyota Motor Corporation agreed to pay a record $1.2 
billion in fines and admit to misleading consumers as part of a settlement with the U.S. 
government over an investigation into the company’s handling of two unintended 
acceleration issues. 

Source: http://www.latimes.com/business/la-fi-hv-tovota-billion-dollar-justice- 
department-settlement-20 1 403 1 9,0,77 94824. story 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. March 19, Bloomberg News - (New York) Simpson Thacher clerk charged in 
insider- trading scheme. A clerk at law firm Simpson Thacher & Bartlett LLP and a 
stockbroker who worked at Oppenheimer & Co., and Morgan Stanley were charged by 
federal authorities for allegedly running an insider trading scheme through a 
middleman that resulted in over $5.6 million in illicit profits. 

Source: http://www.bloomberg.com/news/2014-03-19/simpson-thacher-clerk-charged- 
in-insider-trading-scheme.html 

5. March 19, The Register - (International) ‘Zotob’ hacker ‘DiablO’ arrested in 
Bangkok after three-year hunt. A Moroccan suspected of causing $4 billion in 
damages to Swiss banking systems was arrested in Thailand and faces extradition to 
Switzerland. The man was previously arrested and jailed in Morocco for spreading the 
Zotob worm that infected systems around the world, including a U.S. government Web 
site. 

Source: http://www.theregister.co.uk/2014/03/19/diabl0 hacker arrested bangkok/ 

6. March 18, Carlisle Sentinel - (Pennsylvania) Another bank robbed in South 
Middleton. State Police in Carlisle believe that the suspect who robbed an M&T Bank 
branch in South Middleton Township March 18 was the same suspect responsible for 
two bank robberies in Boiling Springs. The three robberies also caused partial 
lockdowns at South Middleton School District schools since February 27. 

Source: http://cumberlink.com/news/local/crime-and-courts/another-bank-robbed-in- 
south- m i dd I c t o n/a it iclc 055aeb86-aec2-lle3-96b9-0019bb2963f4.html 



For another story, see item 29 
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Transportation Systems Sector 

7. March 19, Youngstown Vindicator - (Ohio) Semi crashes tie up traffic on 1-680, SR 
82. Two separate semi-truck accidents March 18 on Ohio Route 82 westbound in 
Brookfield Township and Interstate 680 southbound in Youngstown forced authorities 
to shut down lanes on both roadways for several hours in order to clean up and 
investigate. 

Source: http://www.vindy.com/news/2014/mar/19/tractor-trailer-crashes-tie-up-traffic- 
o/ 
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8. March 19, Associated Press - (Washington) Seattle looks at helipad rules after 
deadly crash. Authorities are investigating after a KOMO-TV 4 Seattle news 
helicopter plummeted into an intersection near the Seattle Center campus March 18, 
setting three cars on fire and killing two people on board. A third person suffered 
extensive injuries while escaping from their burning car. 

Source: http://news.msn.com/us/seattle-looks-at-helipad-rules-after-deadly-crash 

9. March 18, KTEN 10 Ada - (Oklahoma) Triple fatal accident on Highway 70. A 
portion of Highway 70 in Marshall County, Oklahoma, was shut down for several 
hours March 1 8 after a semi-truck struck a vehicle while trying to avoid another 
vehicle, leaving 3 people dead and another injured. 

Source: http://www.kten.com/storv/25012300/triple-fatal-accident-on-highway-70 

10. March 18,WJZ 13 Baltimore - (Maryland) Fatal crash on Route 100 involved 6 
vehicles, including cement truck. One person was killed and four others were injured 
in a multi-vehicle accident that shut down eastbound Route 100 in Pasadena, Maryland, 
for nearly 7 hours March 18. 

Source: http://baltimore.cbslocal.com/2014/03/18/violent-crash-on-route-100-involved- 
7-vehicles-including-cement-truck/ 

For another story, see item 19 
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Food and Agriculture Sector 

11. March 18, San Francisco Bay City News - (National) Krave beef jerky recalled due 
to safety concerns. The Monterey County Health Department in California announced 
a recall for Krave Jerky’s Garlic Chili Pepper Beef Jerky due to the possibility that the 
product may contain meat from a previous Rancho Feeding Corp., recall which 
concluded that the company was processing diseased and unsound animals without a 
full federal inspection. 

Source: http://www.nbcbayarea.com/news/local/Krave-Beef-Jerkv-Recalled-Due-to- 
Safety-Concems-250725391.html 

12. March 17, U.S. Department of Labor - (Ohio) ConAgra Foods faces $117,000 in US 
Department of Labor OSHA penalties for failing to protect workers from 
dangerous machinery, other hazards. ConAgra Foods Inc., was cited by the 
Occupational Safety and Health Administration March 17 for 13 safety violations at the 
company’s Columbus flour mill, with proposed fines totaling $117,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25743 



13. March 17, U.S. Food and Drug Administration - (National) Fannie May issues a 
voluntary recall of 89.08 cases of 14.0 oz. spring wrapped assorted chocolate box 
due to undeclared peanuts. The U.S. Food and Drug Administration announced 
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March 17 that Fannie May Confections Brands, Inc., recalled 14 ounce packages of its 
spring wrapped assorted chocolates due to undeclared peanuts. 

Source: http://www.fda.gov/Safety/Recalls/ucm389402.htm 

14. March 17, U.S. Food and Drug Administration - (National) Simply Natural Foods, 
LLC issues allergy alert for high levels of milk protein in Simply Lite Dark 
Chocolate Bars. Simply Natural Foods, LLC voluntarily recalled its 3 ounce Simply 
Lite Dark Chocolate Bar after U.S. Food and Drug Administration testing revealed the 
product contains high levels of milk protein, while the labeling only claims the product 
may contain traces of milk. 

Source: http://www.fda.gov/Safety/Recalls/ucm389406.htm 



[ Return to top ] 

Water and Wastewater Systems Sector 

15. March 19, Connecticut Post - (Connecticut) Uranium found in Stamford well water. 
The Connecticut Department of Public Health reported that 70 percent of the 5 dozen 
private wells in the Stamford area sampled since January 2014 tested positive for 
uranium contamination and officials urged homeowners to test drinking water. The 
department is expected to complete water testing across 30 to 40 towns throughout the 
State by the fall of 2014. 

Source: http://www.ctpost.com/local/article/Uranium-found-in-Stamford-well-water- 
5329586.php 

16. March 18, Lorain Morning Journal - (Ohio) Lorain scores $500,000 for water 
quality at Lakeview Park beach. The U.S. Environmental Protection Agency 
provided a $500,000 grant to Lorain’s Lakeview Park through the Great Lakes 
Restoration Initiative designed to improve the quality of water in Lake Erie. The 
improvements will reduce the amount of bacteria in storm water being directly 
discharged into the lake and help reduce the number of bacteria-related beach closures. 
Source: http://www.morningjoumal.com/general-news/20140318/lorain-scores- 
500000-for-water-quality-at-lakeview-park-beach 



T Return to top i 



Healthcare and Public Health Sector 



17. March 17, Health IT Security - (Ohio) Health Source of Ohio file breach affects 
8,800 patients. Health Source of Ohio reported that 8,800 patients were affected by a 
data breach after a file containing protected health information was accessible on the 
Internet from mid-November 2013 through December 2013. The information was 
gathered through a Web-based program used by the health center’s accounting staff and 
somehow available through Internet searches. 

Source: http://heahhitsecurity.com/2014/03/17/public-file-from-health-source-of-ohio- 
affects-8800-patients/ 
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Government Facilities Sector 

18. March 19, Associated Press - (Texas) School cancelled for week due to elementary 
school campus fire. Hamshire-Fannett Elementary School in Texas remained closed 
the week of March 17 after a March 18 roof fire that severely damaged the building. 
Authorities are investigating the extent of the damage and the cause of the fire. 

Source: http://abclocal.go.com/ktrk/storv?section=news/state&id=9472346 

19. March 19, WRAL 5 Raleigh - (North Carolina) Students, drivers injured in school 
bus wreck near Johnston County school. At least 8 students were transported to an 
area hospital while several others were treated at the scene of an accident involving a 
school bus in Johnston County March 19. Authorities closed North Carolina Highway 
50 for about 2 hours after the accident. 

Source: http://www.wral.com/students-drivers-iniured-in-school-bus-wreck-near- 
johnston-county- school/ 1 3492057/ 

20. March 19, WUSA 9 Washington, D.C. - (Washington, D.C.) Howard Univ. dorm fire 
sends 3 to hospital. Students were evacuated from Howard University’s Meridian Hill 
Hall in Washington, D.C., for approximately 3 hours March 19 due to a fire that caused 
two students and a security guard to suffer smoke inhalation requiring hospitalization. 
Source: http://www.wusa9.com/storv/news/local/marvland/2014/03/19/howard- 
universitv-doim-fire-smoke-inhalation-dc/6597347/ 

21. March 18, Associated Press - (National) IRS: Employee took home personal info on 
20K workers. The Internal Revenue Service (IRS) reported March 18 that an employee 
took home a computer thumb drive containing personal information of about 20,000 
IRS workers, former workers, and contractors. The agency’s inspector general is 
investigating the potential breach. 

Source: http://news.msn.com/us/irs-emplovee-took-home-personal-info-on-20k- 
workers 

22. March 18, Alamogordo Daily News - (New Mexico) Gas leak near Oregon 
Elementary School. Students and staff were evacuated from Oregon Elementary 
School in Alamogordo March 18 and classes were cancelled after a damaged gas main 
began leaking. Crews responded to the scene and repaired the leak. 

Source: http://www.alamogordonews.com/alamogordo-news/ci 25371615/gas-leak- 
near-oregon-elementary-school 

For another story, see item 16 



T Return to top i 



Emergency Services Sector 
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23. March 19, Associated Press - (Indiana; Illinois) Ambulance stolen in Gary chased 
into Chicago. A Prompt Ambulance Services private ambulance was stolen while it 
was outside a dialysis center in Gary, Indiana, March 18. Police chased the driver 
before he was caught in Chicago. 

Source: http ://wishtv . com/20 1 4/03/ 1 9/ambulance-stolen-in- gary-chased-into-chicago/ 

24. March 19, WCMH 4 Columbus - (Ohio) Ross County emergency communications 
disrupted following metal theft. The Ross County Sheriff s Office radio repeater site 
in Ohio was broken into and several items were stolen, disabling a portion of the 
county’s radio communications system March 18. Authorities are investigating the 
metal theft and the tower is out of service until it can be repaired. 

Source: http://www.nbc4i.com/story/25011254/metal-theft 
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Information Technology Sector 

25. March 19, Softpedia - (International) Security researcher accidentally 
crashes Google Play when testing PoC app. A security researcher uploading a 
proof of concept for a potential Android vulnerability may have caused several 
users to be unable to upload applications to the Google Play app market for a 
short time. 

Source: http://news.softpedia.com/news/Securitv-Researcher-Accidentally- 
Crashes-Google-Play-When-Testing-PQC-App-432931.shtml 

26. March 19, Softpedia - (International) Hacked EA server used to host Apple phishing 
page. Researchers at Netcraft reported that attackers compromised a server that hosts 
two Electronic Arts (EA) Web sites and used it to host a phishing page that mimics an 
Apple login page. 

Source: http://news.softpedia.com/news/Hacked-EA-Website-Used-to-Host-Apple- 
Phishing-Page-432977.shtml 

27. March 19, Softpedia - (International) Expert finds RCE flaw in Yahoo after logging 
in with “Admin/Admin” credentials. A security researcher identified and reported a 
flaw in a Hong Kong subdomain of Yahoo that allowed him to gain read/write/execute 
permissions by entering a default login name and password. The issue was reported 
February 20 and fixed February 21. 

Source: http://news.softpedia.com/news/Expert-Finds-RCE-Flaw-on-Yahoo-After- 
Logging-in- with- Admin- Admin-Credentials-432956.shtml 

28. March 19, Softpedia - (International) Mozilla releases Firefox 28, fixes 
vulnerabilities presented at Pwn20wn. Mozilla released Firefox 28, the newest 
version of its Web browser, adding new features and closing 18 vulnerabilities 
identified during the Pwn20wn 2014 security competition. 

Source: http://news.softpedia.com/news/Mozilla-Releases-Firefox-28-Fixes- 
Vulnerabilities-Presented-at-Pwn2Qwn-432912.shtml 
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29. March 18, SC Magazine - (International) $30 RAT, WinSpy, involved in two 

phishing campaigns. FireEye researchers identified two phishing campaigns utilizing 
the WinSpy remote access trojan (RAT) and the GimmeRAT Android malware that 
comes packaged with the first RAT. One campaign used spear phishing emails 
targeting U.S. financial institutions while a second was an indiscriminate spam 
campaign. 

Source: http://www.scmagazine.com/30-rat-winspv-involved-in-two-phishing- 
campaigns/article/338770/ 

For another story, see item 5 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

30. March 19, Erie Times-News- (Pennsylvania) Erie’s WQLN goes out Tuesday night, 
more outages likely. Erie’s public broadcasting affiliate WQLN-TV 54 experienced an 
over-the-air transmission outage March 18 due to a transmission problem. Officials 
reported that additional outages were expected March 19-20 while a replacement part is 
installed. 

Source: http://www.goerie.com/article/201403 19/NEWS02/303199908/Erie’s-WQLN- 
goes-out-Tuesday-night-more-outages-likely 
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Commercial Facilities Sector 

31. March 19, Oakland Tribune - (California) Police evacuate Berkeley City Club after 
hazardous materials call. Guests and residents of the Berkeley City Club hotel and 
social club in San Francisco were evacuated March 18 after first responders found a 
suicide note warning that sodium azide was used inside a woman’s apartment unit to 
commit suicide. Crews responded to the scene to investigate. 

Source: http://www.insidebayarea.com/news/ci 25371 04 9/police-evacuate-berkeley- 
city-club-after-hazardous-materials 

32. March 19, WNCT 9 Greenville - (North Carolina) Greenville hotel reopens after gas 
leak. Malfunctioning equipment caused a natural gas leak and prompted the evacuation 
of 30-35 occupants from the Home-Towne Suites hotel in Greenville, North Carolina, 
March 18. The hotel reopened March 19. 
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Source: http://www.wnct.com/story/25005147/gas-leak-forces-evacuation-of- 
greenville-hotel 

33. March 18, WCT1 12 New Bern - (North Carolina) Red Cross: Jacksonville two-alarm 
apartment fire displaces 17 people. Authorities are investigating a 2 alarm fire at the 
Azalea Garden Apartments in Jacksonville, North Carolina, that damaged 7 units and 
displaced 17 residents March 18. 

Source: http://www.wctil2.com/news/firefighters-on-scene-battling-apartment- 
building-blaze/25034934 

34. March 18, Salt Lake Tribune - (Utah) Firefighter badly injured during blaze at 
Lindon’s Vivint Building. Officials believe a March 18 fire at the Vivint warehouse- 
and-office complex in Lindon, which prompted the evacuation of 400-500 employees, 
was sparked by heat tape used to prevent freezing in the facility’s gutter system. One 
firefighter suffered serious injuries after a wall collapsed, and two other individuals 
were treated for smoke inhalation. 

Source: http://www.sltrib.com/sltrib/news/57697719-78/fire-lindon-50Q- 
building.html.csp 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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